diff --git a/editor/js/Sidebar.Scene.js b/editor/js/Sidebar.Scene.js index dfb4c8ee72ae938791f7e734ec81f510eb9b9e17..363f9b6720245933c56a963c5f5bd4b3217ae002 100644 --- a/editor/js/Sidebar.Scene.js +++ b/editor/js/Sidebar.Scene.js @@ -12,6 +12,17 @@ Sidebar.Scene = function ( editor ) { // outliner + function escapeHTML( html ) { + + return html + .replace( /&/g, '&' ) + .replace( /"/g, '"' ) + .replace( /'/g, ''' ) + .replace( //g, '>' ); + + } + function buildOption( object, draggable ) { var option = document.createElement( 'div' ); @@ -45,15 +56,15 @@ Sidebar.Scene = function ( editor ) { function buildHTML( object ) { - var html = ' ' + object.name; + var html = ' ' + escapeHTML( object.name ); if ( object instanceof THREE.Mesh ) { var geometry = object.geometry; var material = object.material; - html += ' ' + geometry.name; - html += ' ' + getMaterialName( material ); + html += ' ' + escapeHTML( geometry.name ); + html += ' ' + escapeHTML( getMaterialName( material ) ); }